Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: btIALqq3tkqYjukap2qWKeH3YYrrLiENh1ovT/T78Cw=
Subject key identifier: 61:FA:3D:12:4C:57:33:22:09:A8:14:98:79:06:D1:33:94:00:61:E1
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 0194BABB85148C5BD3D97C5B0333CD2D45A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 12DD
Signing time: Fri 31 Jan 2025 05:00:38 +0000
Manifest this update: Fri 31 Jan 2025 05:00:38 +0000
Manifest next update: Sat 01 Feb 2025 05:00:38 +0000
Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: GyHjuSb77e3rymZmSIRZ4uzvKeOkoWO1yl1/0FaDH4M=)
2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:85:14:8c:5b:d3:d9:7c:5b:03:33:cd:2d:45:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Jan 31 05:00:38 2025 GMT
Not After : Feb 1 05:00:38 2025 GMT
Subject: CN=61fa3d124c57332209a814987906d133940061e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:7f:db:a0:dd:04:7c:9e:fd:7f:19:82:fd:
ec:e0:80:86:70:52:95:82:c3:8f:62:5b:f8:d8:16:
03:54:ad:89:3e:44:2c:6e:6e:fb:13:81:3b:bb:78:
99:c3:df:d2:ae:c6:9f:76:5f:2c:35:c7:fe:e2:36:
db:23:ba:b0:ed:c6:ab:ee:79:03:c2:ef:ac:ae:e2:
89:d1:d5:23:78:0f:73:72:86:c9:6a:fc:a3:b6:f1:
ee:fb:1a:50:2a:6e:72:cd:91:d4:0e:4b:bc:ce:80:
0f:1f:ad:06:f6:4c:a6:da:80:de:d4:e3:7a:81:ab:
e6:ac:29:16:99:f3:a2:ad:d5:3b:cd:2c:60:ee:89:
6e:57:70:5e:3d:fe:9f:ee:32:1b:79:ea:42:b7:f5:
3a:6b:92:0b:4c:34:b4:4d:16:de:19:53:a5:a2:69:
42:ff:8b:20:2b:80:f0:eb:b6:b1:48:ac:a4:c8:ea:
11:d4:b5:8e:e0:ec:85:c2:4e:18:c7:55:7e:b8:3e:
7a:9d:5b:d8:63:5c:13:39:d1:dd:60:10:1d:40:ef:
c9:c9:1e:ba:79:9e:aa:98:dc:a6:0b:83:29:b6:d5:
d9:ec:c3:fd:cd:34:58:10:e9:95:78:2b:d9:a5:57:
5d:65:61:14:1b:69:9d:48:f5:27:d3:e2:c8:76:a1:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FA:3D:12:4C:57:33:22:09:A8:14:98:79:06:D1:33:94:00:61:E1
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:39:56:15:ec:5f:65:58:50:55:56:3a:2b:ac:62:5f:4e:50:
4d:2f:95:e0:4d:d6:f8:b2:d2:58:2e:f8:33:b2:4f:75:8d:89:
11:ac:71:e6:b1:75:7c:25:dd:6f:77:1d:3c:b7:2a:e2:fc:66:
dc:3a:39:56:a4:38:28:1a:2f:04:40:62:6b:06:3f:7f:c8:9c:
84:1a:3f:67:8e:3e:6b:e0:c0:75:b4:fc:6a:34:b4:f5:cc:60:
40:1e:c4:78:7e:52:4e:c8:32:50:8a:07:e6:1b:36:28:c9:e7:
0d:ea:b1:96:1d:9b:9c:fe:c1:59:8a:8a:6b:26:e1:8c:2f:bb:
36:5a:8c:73:b7:5c:b4:3f:e4:64:45:b7:82:eb:2c:31:b1:d0:
80:40:ed:8a:a8:84:e4:59:ae:99:e0:2f:82:1a:cf:62:f4:d8:
06:01:18:06:9c:53:a2:ae:44:e2:8e:68:2d:b3:17:31:29:f2:
dc:c0:b1:26:79:4d:2a:0e:fd:dc:bf:27:49:0c:0a:4e:0b:84:
24:fa:3a:fa:fe:30:29:5d:1a:d0:55:f0:0d:5a:45:88:fc:fe:
76:5f:65:17:0f:3d:6b:f5:68:8e:a5:63:d9:69:01:1f:30:57:
ba:b0:5b:85:51:67:8c:a8:70:7d:ba:7d:9e:8c:23:f1:be:8d:
1b:5e:ee:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u4UUjFvT2XxbAzPNLUWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzM3YzBjODU2OTQ2YjhmYmRhZjI4NWY1MmNhZGRjZjM4
YWQwYTgwHhcNMjUwMTMxMDUwMDM4WhcNMjUwMjAxMDUwMDM4WjAzMTEwLwYDVQQD
Eyg2MWZhM2QxMjRjNTczMzIyMDlhODE0OTg3OTA2ZDEzMzk0MDA2MWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub1/26DdBHye/X8Zgv3s4ICGcFKV
gsOPYlv42BYDVK2JPkQsbm77E4E7u3iZw9/Srsafdl8sNcf+4jbbI7qw7car7nkD
wu+sruKJ0dUjeA9zcobJavyjtvHu+xpQKm5yzZHUDku8zoAPH60G9kym2oDe1ON6
gavmrCkWmfOirdU7zSxg7oluV3BePf6f7jIbeepCt/U6a5ILTDS0TRbeGVOlomlC
/4sgK4Dw67axSKykyOoR1LWO4OyFwk4Yx1V+uD56nVvYY1wTOdHdYBAdQO/JyR66
eZ6qmNymC4MpttXZ7MP9zTRYEOmVeCvZpVddZWEUG2mdSPUn0+LIdqFSVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH6PRJMVzMiCagUmHkG0TOUAGHhMB8GA1UdIwQY
MBaAFI0zfAyFaUa4+9ryhfUsrdzzitCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMt
M2YxNWY4ODM2ZGJiLzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMtM2YxNWY4ODM2ZGJi
LzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDlWFexf
ZVhQVVY6K6xiX05QTS+V4E3W+LLSWC74M7JPdY2JEaxx5rF1fCXdb3cdPLcq4vxm
3Do5VqQ4KBovBEBiawY/f8ichBo/Z44+a+DAdbT8ajS09cxgQB7EeH5STsgyUIoH
5hs2KMnnDeqxlh2bnP7BWYqKaybhjC+7NlqMc7dctD/kZEW3gussMbHQgEDtiqiE
5FmumeAvghrPYvTYBgEYBpxToq5E4o5oLbMXMSny3MCxJnlNKg793L8nSQwKTguE
JPo6+v4wKV0a0FXwDVpFiPz+dl9lFw89a/VojqVj2WkBHzBXurBbhVFnjKhwfbp9
nowj8b6NG17uLw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:36 2025 by rpki-client on console-fra.rpki-client.org